Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/tduecvevfVBfWQMl1bMyNMqxjVg.roa
File: tduecvevfVBfWQMl1bMyNMqxjVg.roa (raw, json)
Hash identifier: Amu1NLlkkihKann+zZbcswZOHACCp6OT2MEJHsSk1QU=
Subject key identifier: B5:DB:9E:72:F7:AF:7D:50:5F:59:03:25:D5:B3:32:34:CA:B1:8D:58
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 018571BA059E7FC3FBED0DF875B3466E4943
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/tduecvevfVBfWQMl1bMyNMqxjVg.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57395
IP address blocks: 185.255.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:05:9e:7f:c3:fb:ed:0d:f8:75:b3:46:6e:49:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5db9e72f7af7d505f590325d5b33234cab18d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:4d:21:a4:af:bd:b6:b0:2f:ba:db:76:01:
be:5d:da:b8:79:73:1c:d9:f4:c9:ff:73:02:a3:a9:
15:11:6f:58:5b:98:47:61:5d:c5:09:77:89:6d:ab:
93:e3:ed:ce:de:48:e2:9e:8c:15:f4:2b:dc:b0:92:
c2:45:17:52:f2:63:6b:c2:55:54:cf:e3:43:e9:d9:
a5:38:e3:91:46:6e:f2:e4:aa:61:1a:02:8f:5e:c7:
d3:e0:30:75:d5:b7:51:0c:8a:07:73:6e:94:41:0b:
02:87:8c:c8:0f:da:39:1e:3e:d0:55:d1:09:48:37:
c7:7b:9f:1d:a2:77:92:08:57:4f:01:eb:97:51:02:
4b:73:e7:2b:db:b5:d3:41:bc:b0:49:52:60:c8:cd:
8f:8d:ad:bc:af:a4:3f:11:02:98:b6:1f:4a:b3:59:
ae:68:18:98:c1:47:5f:67:41:c0:3f:49:0c:c1:4d:
2b:62:10:5a:cf:b6:84:ec:75:61:06:7c:a8:10:72:
9f:3b:53:a2:44:0c:f6:e2:1c:2f:fc:5b:14:dc:06:
0c:c5:7c:89:f2:ca:1d:f7:07:bc:bb:9a:ac:38:8d:
0a:02:0b:79:1b:0a:49:be:c8:ac:82:85:e9:50:dc:
d4:55:26:4b:33:3b:95:12:3a:e7:fc:de:1b:5c:14:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:9E:72:F7:AF:7D:50:5F:59:03:25:D5:B3:32:34:CA:B1:8D:58
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/tduecvevfVBfWQMl1bMyNMqxjVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:2e:de:b8:6b:3d:d2:68:c6:83:40:24:a0:9f:6e:3d:18:ef:
af:4a:a0:49:b6:2b:69:00:54:77:ad:ea:4e:d1:fd:8e:e2:18:
79:37:57:db:e2:76:b0:24:86:ca:45:b2:01:ca:f1:b5:aa:e3:
36:c6:be:a0:bc:32:44:bf:ca:65:3f:89:7f:ab:e4:f0:b4:11:
2f:1f:fd:0e:3f:7a:06:db:73:97:d1:14:88:ba:70:f9:e3:f2:
7e:51:8a:f7:d7:aa:37:b4:15:f7:79:a1:d1:fd:de:40:84:34:
76:81:57:56:10:d3:2b:55:8b:16:fb:35:27:d3:8a:0f:1f:c2:
a8:d7:97:62:c3:e5:42:69:7e:91:81:d4:5c:52:4e:c1:05:3d:
88:6a:d7:2c:79:1e:91:70:7d:ee:bf:54:79:6c:8f:6f:3f:11:
d2:74:ea:cd:5e:a1:17:6b:cb:cc:ef:32:7d:ce:6c:bf:50:c7:
00:e4:74:50:02:74:32:83:22:6d:da:ec:b2:f0:70:64:d6:8d:
2f:38:25:7b:6f:38:77:9b:56:a5:ea:89:54:8b:e6:49:b0:f1:
3a:b3:e4:4d:43:41:b1:04:6c:1a:59:3f:4c:98:29:31:3e:64:
b2:55:ca:af:33:79:c8:53:d3:b7:15:31:07:9f:ba:fe:4d:8d:
a8:11:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:33 2025 by rpki-client